5 ms·
I'd rather use firecracker before I trust another one of those half-baked Google projects.
by tsss 2y ago
I'd rather use firecracker before I trust another one of those half-baked Google projects.
- azornathogron 2y agoWhat's half-baked about GVisor? It's been in use as one of the security layers in various Google products for years, see for example: https://cloud.google.com/blog/products/containers-kubernetes/how-gvisor-protects-google-cloud-services-from-cve-2020-14386 https://cloud.google.com/blog/products/containers-kubernetes...
- ithkuil 2y agoIIRC you can't use firecracker if all you have are VMs and you don't have nested virtualization enabled. Does ec2 now support nested virtualization?